603f8e8afb55c4b917237c77af06defe444c77160798668fe6305c8673f17009 | Triage

Sharing

General

Target

603f8e8afb55c4b917237c77af06defe444c77160798668fe6305c8673f17009
Size

35KB
MD5

b3e147cf35094694add7e44225c4bd6a
SHA1

0c6de416526b4e8abf560e09c00243e75eb0e9cc
SHA256

603f8e8afb55c4b917237c77af06defe444c77160798668fe6305c8673f17009
SHA512

ed9e78862fa6c38e10a799e9d444850f721287f34c39d543458a5bf13906e48f2bce09c61a74fec572df23c0bee3fd4492b4c3a8c14d20cf01daa68d18a69c04
SSDEEP

768:cy5dA+DX/8KH13vfdHldhwyEgYzQw2TSuL:bdA+oi13vfdHldhwgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603f8e8afb55c4b917237c77af06defe444c77160798668fe6305c8673f17009

Files

603f8e8afb55c4b917237c77af06defe444c77160798668fe6305c8673f17009
.exe windows:4 windows x86 arch:x86

5bafb291df732bd8895bcff11e861198

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
SizeofResource
lstrlenW
LockResource
LoadResource
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualFree
ExitProcess

user32

GetMessageA
GetSystemMetrics
LoadCursorA
PostQuitMessage
ReleaseDC
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
GetDC

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
BitBlt

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ